Crypto exchanges Binance and Deribit have revoked API keys connected to derivatives platform SignalPlus. The precautionary move follows a security breach that compromised SignalPlus’ internal network early Wednesday. Both exchanges confirmed their internal systems remain secure, but external connections were immediately severed to prevent further risk.
How the Fake Meeting Invite Got In
The attack originated from a compromised Telegram account belonging to a contact at a third-party technology vendor. The perpetrator used the hijacked account to impersonate the contact and send a fake Microsoft Teams meeting invite to a SignalPlus engineer.
The fake invite link infected the engineer’s computer with malware. After deploying the malicious software, the hackers remained dormant to monitor the situation before launching their intrusion into SignalPlus’ internal network early Wednesday.
The IP Whitelisting Oversight
SignalPlus stated that the intrusion has been contained, with total losses kept below $82,000. The platform’s management committed to covering and fully reimbursing 100% of the losses incurred by affected users.
SignalPlus acknowledged an operational oversight: the failure to implement IP address restrictions (IP whitelisting) for crypto exchange API key access. Due to the absence of IP protection, API connections could be executed from any network location. SignalPlus has now temporarily suspended all services to conduct a comprehensive security audit.
The revocation of access directly affects users of the partner exchanges. Deribit warned its clients that all options trading monitoring, automation, and execution activities via SignalPlus have ceased since the API keys were revoked.
57 Cyber Threats Recorded and Partner Reviews
Binance and Deribit emphasized that their respective internal servers were not impacted by the third-party incident. The cut in access was solely aimed at protecting user accounts from potential API key misuse.
Binance co-founder Yi He urged all platforms integrated with the exchange to immediately review their security controls. In a statement, Yi He revealed that Binance’s defense systems had thwarted 57 North Korea-linked cyber threats throughout 2026.
The incident serves as a practical reminder for crypto investors: safeguarding funds on major exchanges is not enough if third-party intermediary applications continue to neglect basic security practices like IP restrictions.
Reported via Cointelegraph.
Read also: North Korean Hackers Behind 89% of 2026 Crypto Losses - Loot Reaches $13.24 Billion
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
